Lucene search
+L

1224 matches found

Patchstack
Patchstack
added 2025/03/27 11:1 a.m.8 views

WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by LVT-tholv2k in WordPress Plugin JS Help Desk versions = 2.9.2...

9.1CVSS7AI score0.00595EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/03/27 10:31 a.m.6 views

WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin JS Help Desk versions = 2.9.2...

8.1CVSS7AI score0.00817EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/19 12:0 a.m.6 views

SolarWinds Web Help Desk < 12.8.5 Information Disclosure

The version of Solarwinds Web Help Desk installed on the remote host is prior to 12.8.5. It is, therefore, affected by a vulnerability. SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software. Note that...

5.5CVSS5.6AI score0.00279EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/13 10:57 a.m.15 views

CVE-2024-28989

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

5.5CVSS6.3AI score0.00279EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/13 10:15 a.m.3 views

CVE-2024-13606

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data store...

7.5CVSS7.3AI score0.00416EPSS
SaveExploits0References2
NVD
NVD
added 2025/02/13 10:15 a.m.18 views

CVE-2024-13606

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data store...

7.5CVSS0.00416EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/13 9:21 a.m.67 views

CVE-2024-13606

CVE-2024-13606 relates to the WordPress plugin “JS Help Desk – The Ultimate Help Desk & Support Plugin.” According to the provided documents, all versions up to and including 2.8.8 are vulnerable to an Unauthenticated Sensitive Information Exposure via an insecure directory: /wp-content/uploads/j...

7.5CVSS6.5AI score0.00416EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/13 9:21 a.m.11 views

CVE-2024-13606 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data store...

7.5CVSS6.5AI score0.00416EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/13 9:21 a.m.19 views

CVE-2024-13606 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data store...

7.5CVSS0.00416EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/13 12:0 a.m.11 views

PT-2025-6581 · WordPress · Js Help Desk

Name of the Vulnerable Software and Affected Versions: JS Help Desk – The Ultimate Help Desk & Support Plugin versions up to, and including, 2.8.8 Description: The issue concerns the exposure of sensitive information in the JS Help Desk plugin for WordPress. This vulnerability allows...

7.5CVSS9.2AI score0.00416EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/02/13 12:0 a.m.7 views

WordPress plugin JS Help Desk 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. An information disclosure vulnerabili...

7.5CVSS7.9AI score0.00416EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/02/12 10:16 p.m.7 views

WordPress JS Help Desk plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability

Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability discovered by Tim Coen in WordPress Plugin JS Help Desk versions = 2.8.8...

7.5CVSS7AI score0.00416EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
added 2025/02/11 1:30 p.m.19 views

4 Ways to Keep MFA From Becoming too Much of a Good Thing

Multi-factor authentication MFA has quickly become the standard for securing business accounts. Once a niche security measure, adoption is on the rise across industries. But while it's undeniably effective at keeping bad actors out, the implementation of MFA solutions can be a tangled mess of...

7.4AI score
SaveExploits0
OSV
OSV
added 2025/02/11 8:15 a.m.6 views

CVE-2024-28989

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

5.5CVSS5.8AI score0.00279EPSS
SaveExploits0References2
NVD
NVD
added 2025/02/11 8:15 a.m.27 views

CVE-2024-28989

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

5.5CVSS0.00279EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/11 7:13 a.m.8 views

CVE-2024-28989 SolarWinds Web Help Desk Cryptographic Key Management Vulnerability

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

5.5CVSS5.2AI score0.00279EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/11 7:13 a.m.25 views

CVE-2024-28989 SolarWinds Web Help Desk Cryptographic Key Management Vulnerability

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

5.5CVSS0.00279EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/11 12:0 a.m.5 views

SolarWinds Web Help Desk 安全漏洞

SolarWinds Web Help Desk is a suite of help desk and asset management software from US-based SolarWinds. The software supports centralized knowledge base, IT asset management, project and task management, and other features. A security vulnerability exists in SolarWinds Web Help Desk versions pri...

5.5CVSS6.1AI score0.00279EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/07 5:52 p.m.10 views

CVE-2024-13607

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.8 via the 'exportusereraserequest' due to missing validation on a user controlled key. This makes it possible for authenticat...

4.3CVSS6.4AI score0.00404EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:22 a.m.19 views

CVE-2025-22760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a through = 1.1.2...

7.1CVSS7.2AI score0.00271EPSS
SaveExploits0References1
Rows per page
Query Builder